mention systems without mmap or MAP_ANON

This commit is contained in:
Damien Miller 2002-06-22 00:48:02 +10:00
parent 263d68fc56
commit 828b196214
1 changed files with 5 additions and 1 deletions

View File

@ -8,6 +8,10 @@ More information is available at:
Privilege separation is now enabled by default; see the
UsePrivilegeSeparation option in sshd_config(5).
On systems which lack mmap or anonymous (MAP_ANON) memory mapping,
compression must be disabled in order for privilege separation to
function.
When privsep is enabled, the pre-authentication sshd process will
chroot(2) to "/var/empty" and change its privileges to the "sshd" user
and its primary group. You should do something like the following to
@ -53,4 +57,4 @@ process 1005 is the sshd process listening for new connections.
process 6917 is the privileged monitor process, 6919 is the user owned
sshd process and 6921 is the shell process.
$Id: README.privsep,v 1.6 2002/06/21 14:45:50 djm Exp $
$Id: README.privsep,v 1.7 2002/06/21 14:48:02 djm Exp $